> I've been doing some research into this and so far the main 
> cause seems 
> to be that we were not calling SSL_free after each connection 
> closed.  
>  From what I have gathered, the correct way to cleanup after a 
> connection is to call the following functions in this order:
> 
>     SSL_shutdown(ssl);
>     SSL_free(ssl);
>     close(socket);

Are you creating a new SSL context for every connection? You should
call SSL_CTX_free() for each context created.

Is your app multithreaded?  You'll need to allocate and free
the mutexes (CRYPTO_set_locking_callback() and associated
functions).  Also call ERR_remove_state() before a thread
terminates to clear it's error queue.

Best Regards,
Mark 

 
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to